Merge branch 'main' into sorting/add-bubble-sort

Author: soo-bak

.github/labels.yml

@@ -0,0 +1,63 @@
+- name: "status/backlog"
+  color: "cfd3d7"
+  description: "Not yet prioritized for a sprint."
+- name: "status/in-progress"
+  color: "0b6e99"
+  description: "Actively being worked on."
+- name: "status/blocked"
+  color: "d93f0b"
+  description: "Cannot proceed until an external dependency is resolved."
+- name: "status/review"
+  color: "fbca04"
+  description: "Ready for code review or testing."
+- name: "status/ready"
+  color: "0e8a16"
+  description: "Groomed and ready to be picked up."
+- name: "type/feature"
+  color: "1d76db"
+  description: "Adds new runtime capabilities or visualizations."
+- name: "type/bugfix"
+  color: "d73a4a"
+  description: "Corrects a functional defect."
+- name: "type/refactor"
+  color: "f9d0c4"
+  description: "Improves structure without changing behaviour."
+- name: "type/docs"
+  color: "5319e7"
+  description: "Documentation or knowledge-base updates."
+- name: "type/tooling"
+  color: "0366d6"
+  description: "Tooling, build, or automation tasks."
+- name: "domain/core"
+  color: "0052cc"
+  description: "Affects com.soobak.algo.core primitives or pipeline."
+- name: "domain/sorting"
+  color: "8a2be2"
+  description: "Affects sorting-domain models, algorithms, or visualizers."
+- name: "domain/visualization"
+  color: "b60205"
+  description: "UI or rendering concerns for algorithm playback."
+- name: "domain/ci"
+  color: "6f42c1"
+  description: "CI/CD, GitHub Actions, or release automation."
+- name: "domain/testing"
+  color: "1f6feb"
+  description: "Test harnesses, fixtures, or coverage work."
+- name: "priority/high"
+  color: "b60205"
+  description: "Critical for the next release or demo."
+- name: "priority/medium"
+  color: "fbca04"
+  description: "Important but can wait one iteration."
+- name: "priority/low"
+  color: "94d3a2"
+  description: "Nice-to-have or low urgency."
+- name: "needs/triage"
+  color: "fef2c0"
+  description: "Requires triage before work can start."
+- name: "needs/tests"
+  color: "d4c5f9"
+  description: "Missing or insufficient automated coverage."
+- name: "needs/docs"
+  color: "f9bc2f"
+  description: "Documentation updates are required before closure."

.github/workflows/commit-sentinel.yml

@@ -1,4 +1,4 @@
-# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 name: Commit Sentinel
 
 on:
@@ -41,6 +41,21 @@ jobs:
           commit_file="$GITHUB_WORKSPACE/.git/commit_range"
           commits=""
 
+          allowed_unsigned_commits=(
+            deceb7aa4e4c19deae5a90d84c8b52b327691ae6
+            c6476b9aaadf0db91b9e119e6b2d2d92d2348736
+          )
+
+          is_allowed_unsigned() {
+            local target="$1"
+            for legacy in "${allowed_unsigned_commits[@]}"; do
+              if [ "$legacy" = "$target" ]; then
+                return 0
+              fi
+            done
+            return 1
+          }
+
           ensure_commit() {
             git rev-parse --quiet --verify "${1}^{commit}" > /dev/null 2>&1
           }
@@ -76,6 +91,10 @@ jobs:
           echo "COMMIT_LIST_FILE=$commit_file" >> "$GITHUB_ENV"
 
           while read -r commit; do
+            if is_allowed_unsigned "$commit"; then
+              echo "::notice::Commit $commit skipped: legacy unsigned commit allowed." >&2
+              continue
+            fi
             if ! git verify-commit "$commit" >/dev/null 2>&1; then
               echo "::error::Commit $commit lacks a trusted signature" >&2
               exit 1
@@ -113,3 +132,6 @@ jobs:
           if ($invalid.Count -gt 0) {
             Write-Error "Commit message(s) violate ':gitmoji: scope: message' convention:`n- " + ($invalid -join "`n- ")
           }
+
+
+

.github/workflows/sync-labels.yml

@@ -0,0 +1,40 @@
+name: Sync Labels
+
+on:
+  workflow_dispatch:
+  push:
+    paths:
+      - .github/labels.yml
+
+permissions:
+  contents: read
+  issues: write
+
+jobs:
+  sync-labels:
+    name: Sync Repository Labels
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Sync labels via gh api
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        shell: bash
+        run: |
+          set -euo pipefail
+          labels_json=$(ruby -ryaml -rjson -e 'puts YAML.load_file(ARGV[0]).to_json' .github/labels.yml)
+          echo "$labels_json" | jq -c '.[]' | while read -r label; do
+            name=$(echo "$label" | jq -r '.name')
+            color=$(echo "$label" | jq -r '.color // "cfd3d7"' | tr '[:lower:]' '[:upper:]' | tr -d '#')
+            description=$(echo "$label" | jq -r '.description // ""')
+            encoded_name=$(jq -nr --arg v "$name" '$v|@uri')
+            if gh api --silent --method PATCH "/repos/${GITHUB_REPOSITORY}/labels/${encoded_name}" \
+              -f new_name="$name" -f color="$color" -f description="$description"; then
+              echo "Updated label: $name"
+            else
+              gh api --silent --method POST "/repos/${GITHUB_REPOSITORY}/labels" \
+                -f name="$name" -f color="$color" -f description="$description"
+              echo "Created label: $name"
+            fi
+          done